Skip to content

Race condition on Oauth2RedirectUrl #349

Description

@Kruschenstein

Hello!

I encounter a synchronization issue during Oauth2RedirectUrl generation. That's odd because it's due to swagger interface that sends two time each request (GET swagger-config & api-doc), but that's involve a race condition that generate the wrong redirect uri:

image
image

I want to add that this not happens every time, but when we are in this configuration, we couldn't authenticate and we have to reboot the server.

A priori, there is a lack of synchronization in SwaggerWelcome#buildConfigUrl(HttpServletRequest).

By the way, there is another annoying stuff about oauth2RedirectUrl because this addressed is cached too, and depending on end-user domain request, this url may change. It doesn't seem to have a way to disable the cache here, or am I wrong? (may I open another issue?)

Thank you in advance

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions